Security Tokens: Buy one ASAP

I have sufficient reason to believe that Square Enix has security issues that compromise their players' logins and passwords.  Security Token password is the one thing that hackers can not beat, unless they install certain keylogging software onto your computer, which at that point means your system is compromised anyway.

Don't think of it as just securing your characters, think of it as securing all of your personal data on their websites, since the token, once registered, will be required to log into all website services, too.

After spending some substantial time this evening looking into various claims and reports, I just purchased one for myself.

edit: for those who may not know of what I mean, click this link: http://www.square-enix.com/na/account/otp/

Thanks for the reminder.   I purchased one back in August, but wanted to wait until the login problems were history before I activated it.  Just did!

Thank you for the information,. I just set this up for my account

I set one up when they posted the security warning and recommendation.  They said that some sites had been compromised.

Just make sure you record your emergency removal code in case you lose your phone.

Well, they were talking about fansites from what I recall, which is true, those sites are constantly hacked, most often the site owners never know about the breach, either.

I believe that Square Enix has been breached, meaning everyone's account information is compromised.  As we've seen with SOE and a couple of other companies, they don't always alert their customers in a timely fashion, assuming they've detected the breach and understand what information was stolen.

They've all been hit, Ubisoft, Blizzard, Trion Worlds, SOE, Codemasters... so this is not by any means a paranoid over-reaction.  These RMT sites are getting hold of too many accounts, and I've been reading posts and reports from some credible players that appear to have taken all of the appropriate steps.  I am still doing my own investigation, I have my suspicions as to where the breach occurred, but I don't have any real facts to support them. 

The common link is that of all of those accounts that have been hacked, none of them have had a Security Token.  So bottom line... I strongly recommend changing your passwords and getting one, ASAP.

Thanks for letting us know. I got mine on my phone. I don't trust the keychain ones sense you can't change the registration code on them as easily as you can on an Android or Iphone app

Thanks for the info, I just downloaded the free app

Yeah I got the app on my phone.  It's free and took about 5 minutes to set up.

If you use a Software Security Token, make sure that you are aware of the information here: http://www.gaiscioch.com/tavern/ffxiv_discussion/post_65017.html

Just to follow up with an example to my comment about companies getting hacked and not even knowing it, Adobe was recently hacked, they stole not just credit card, login and personal information for 2.9 million customers... they stole the SOURCE CODE for Adobe Acrobat and Cold Fusion.

The only reason Adobe found out about it, was via a security firm that investigating breaches at other companies.  They found some Adobe source code hidden on hacked computers, contacted Adobe then Adobe launched the investigation.

Story can be read at: http://news.msn.com/science-technology/adobe-says-hackers-stole-source-code-customer-data

I've got one just to be safe, and we just ordered Klystora one as well! Can never be too careful these days!

Anyone know if you have one from 1.0 whether you need to buy a more secure one?  I am not quite sure whether they have been improved or not.

Hex, as far as I know, it is the same type of token with the same security. You should not need a new one!

Its a Square Enix token, so its same type no matter what game you play(ed), ARR, 1.0 or FFXI.  I was hoping to use one I had for another game, it has the same basic code and serial numbers, but it did not work.  Still waiting on the one that I ordered back on the 24th, too.